Lucene search

[email protected]NVD:CVE-2006-0368

HistoryJan 22, 2006 - 8:03 p.m.

CVE-2006-0368

2006-01-2220:03:00

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.063

Percentile

93.6%

JSON

Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.

Affected configurations

Nvd

Node

ciscocall_manager

ciscocall_managerMatch1.0

ciscocall_managerMatch2.0

ciscocall_managerMatch3.0

ciscocall_managerMatch3.1

ciscocall_managerMatch3.1\(2\)

ciscocall_managerMatch3.1\(3a\)

ciscocall_managerMatch3.2

ciscocall_managerMatch3.3

ciscocall_managerMatch3.3\(3\)

ciscocall_managerMatch3.3\(3\)es61

ciscocall_managerMatch3.3\(4\)es25

ciscocall_managerMatch3.3\(5\)

ciscocall_managerMatch3.3\(5\)es30

ciscocall_managerMatch4.0

ciscocall_managerMatch4.0\(2a\)es40

ciscocall_managerMatch4.0\(2a\)es62

ciscocall_managerMatch4.0\(2a\)sr2b

ciscocall_managerMatch4.1\(2\)es33

ciscocall_managerMatch4.1\(2\)es55

ciscocall_managerMatch4.1\(3\)es07

ciscocall_managerMatch4.1\(3\)es32

ciscocall_managerMatch4.1\(3\)sr1

VendorProductVersionCPE
ciscocall_manager*cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*
ciscocall_manager1.0cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*
ciscocall_manager2.0cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*
ciscocall_manager3.0cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*
ciscocall_manager3.1cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*
ciscocall_manager3.1(2)cpe:2.3:h:cisco:call_manager:3.1\(2\):*:*:*:*:*:*:*
ciscocall_manager3.1(3a)cpe:2.3:h:cisco:call_manager:3.1\(3a\):*:*:*:*:*:*:*
ciscocall_manager3.2cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*
ciscocall_manager3.3cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*
ciscocall_manager3.3(3)cpe:2.3:h:cisco:call_manager:3.3\(3\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	call_manager	*	cpe:2.3:h:cisco:call_manager::::::::
cisco	call_manager	1.0	cpe:2.3:h:cisco:call_manager:1.0:::::::*
cisco	call_manager	2.0	cpe:2.3:h:cisco:call_manager:2.0:::::::*
cisco	call_manager	3.0	cpe:2.3:h:cisco:call_manager:3.0:::::::*
cisco	call_manager	3.1	cpe:2.3:h:cisco:call_manager:3.1:::::::*
cisco	call_manager	3.1(2)	cpe:2.3:h:cisco:call_manager:3.1\(2\):::::::*
cisco	call_manager	3.1(3a)	cpe:2.3:h:cisco:call_manager:3.1\(3a\):::::::*
cisco	call_manager	3.2	cpe:2.3:h:cisco:call_manager:3.2:::::::*
cisco	call_manager	3.3	cpe:2.3:h:cisco:call_manager:3.3:::::::*
cisco	call_manager	3.3(3)	cpe:2.3:h:cisco:call_manager:3.3\(3\):::::::*

Rows per page:

1-10 of 231

References

secunia.com/advisories/18494

securityreason.com/securityalert/359

securitytracker.com/id?1015503

www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml

www.osvdb.org/22622

www.osvdb.org/22623

www.securityfocus.com/bid/16295

www.vupen.com/english/advisories/2006/0249

exchange.xforce.ibmcloud.com/vulnerabilities/24180

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.063

Percentile

93.6%

JSON

Related for NVD:CVE-2006-0368

prion1 cve1 cvelist1 cisco1